Article 1: Purpose and scope of data collection

1.1. Scope of Data Collection

The data collected on the website www.victoriavn.com and during the provision of healthcare services at the clinic includes:

• Appointment booking: Full name, date of birth, phone number, email address, registered specialty, and request details (if any).
• Laboratory test result lookup: Customer ID, sample collection date, and sample ID.
• Consultation and customer care: Contact information and details of the support request.
• Recruitment: Personal information, educational qualifications, and work experience.
• Access data, IP address, access time, browser information, landing page, and HTTP response code.
• Information about and status of connected devices.
• Identification data and cookies.

This data is necessary for Victoria Healthcare Clinic to provide accurate, safe, and effective services. Victoria Healthcare Clinic is committed to collecting, analyzing, aggregating, processing, storing, and protecting personal data in accordance with applicable laws. The exercise of personal data subjects’ rights shall be carried out in accordance with applicable laws.

1.2. Purposes of Data Collection

Your personal data is collected for the following purposes:

• Providing and managing healthcare services.
• Contacting you to confirm appointments and provide customer support.
• Sending notifications related to services and healthcare.
• Resolving issues that may arise during the provision of services to customers.
• Optimizing the user experience.
• Understanding customer needs.
• Ensuring security and administering systems.
• Complying with legal requirements and carrying out reconciliation or verification when requested.

Victoria Healthcare Clinic is committed to not using personal data for purposes other than those stated above without your consent, except where otherwise provided by law.

Article 2: Sharing data with third parties

To the extent necessary for service operations and provision, Victoria Clinic may share personal data with third parties—specifically affiliates or authorized partners. These entities are required to:

• Process data solely for the specific agreed-upon purposes and in accordance with the data collection purposes outlined in this policy.
• Strictly comply with data security and safety requirements established by Victoria Clinic and applicable laws.

Article 3: Data retention period

Victoria Clinic will retain your personal data for the period necessary to fulfill the identified purposes of collection, while complying with applicable laws and regulations of specialized regulatory bodies, including but not limited to sector-specific regulations issued by competent authorities.

In the event that you submit a valid request to delete the personal data you have provided, Victoria Clinic will verify the request and the data previously provided by you before proceeding with the deletion in accordance with the law. (1)

Article 4: Entity collecting and managing information

Victoria Healthcare International Hospital Joint Stock Company

Address: 190 Tran Luu, Quarter 2, Binh Trung Ward, Ho Chi Minh City

Phone: 028 6686 5656

Email: CSKH@www.victoriavn.com

Article 5: Customer Obligations

5.1. Customers have the obligation to:

• Protect their own personal data.
• Respect and protect the personal data of others.
• Provide complete and accurate personal data in accordance with the law, under a contract, or when consenting to the processing of their personal data.
• Comply with laws regarding personal data protection and participate in preventing and combating activities that infringe upon personal data.

5.2. When exercising their rights and fulfilling their obligations, Customers must adhere to the following principles:

• Act in accordance with the law; the exercise of rights and fulfillment of obligations by the Customer must aim to protect their own legitimate rights and interests.
• Not cause difficulties or obstruct the exercise of legal rights and obligations by the personal data controller, the personal data controller and processor, or the personal data processor.
• Not infringe upon the legitimate rights and interests of the State, agencies, organizations, or other individuals.

Article 6: Your Rights

You may exercise the following rights:

• Request the correction or updating of personal data.
• Request to stop receiving service-related information.
• Request assistance regarding personal data.
• Be informed about personal data processing activities.
• Provide or withhold consent, or request the withdrawal of consent, for the processing of personal data.
• View, edit, or request the correction of personal data.
• Request the provision, deletion, or restriction of personal data processing, or object to the processing of personal data.
• File complaints, denunciations, or lawsuits, and claim compensation for damages in accordance with the law.
• Request competent authorities or entities/individuals involved in personal data processing to implement measures and solutions to protect your personal data in accordance with the law.

Please send any requests to info@www.victoriavn.com for processing within a reasonable timeframe as prescribed by law.

Article 7: Data Privacy Commitment

Victoria Clinic is committed to protecting customers’ personal data through appropriate technical, organizational, and managerial measures, ensuring safety and security throughout the data processing and usage process.

Victoria Clinic commits to using customers’ personal data solely for the purposes specified in Clause 1.1, Article 1 and within the scope of use defined in Article 2 of this policy.

---

(1) Pursuant to Clause 2, Article 14 of the Law on Personal Data Protection 2025; Clause 10, Article 7 of the Law on Medical Examination and Treatment 2023; and Clause 2, Article 60 of the Law on Medical Examination and Treatment 2023.